|
By Hanh Pham
Enterprise AI is increasingly connected to sensitive data, business applications, APIs, and automated workflows. But the security controls surrounding these systems are not always keeping pace. IBM's 2025 Cost of a Data Breach Report found that 13% of organizations experienced breaches involving AI models or applications, and 97% of those organizations lacked proper AI access controls.
|
By Aarthi Murugan
Five worthy reads is a regular column on five noteworthy items we’ve discovered while researching trending and timeless topics. In this edition we talk about the biggest tension in tech right now, which isn't building AI faster but surviving the security shortcuts taken to launch it and discover how smart teams can rewrite the play-book on governance.
|
By Mahanya V
On Patch Tuesday in January 2023, Microsoft fixed a privilege escalation flaw in afd.sys, the Windows driver behind the Winsock networking interface. Two IBM X-Force researchers who had never worked with that driver compared the old and new versions of the file and had a working exploit for Windows 11 in about a day. China's 360 IceSword Lab later reported finding the same flaw already exploited in the wild that month.
On October 21, 2026, PHP fixed two critical unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619. CISA added both to its Known Exploited Vulnerabilities catalog on October 26th. The real fix is upgrading PHP and restarting every worker process. But many Windows servers can’t do that yet: the vendor hasn’t certified the new version, the PHP branch is end-of-life, or nobody knows whether a PHP copy exists inside an old application.
|
By Omar Hafiz
We need to face a bitter truth: Most security awareness training out there just doesn’t work the way it’s supposed to. Year after year, companies worldwide pour billions into all sorts of training programs, posters, and click-through modules, yet phishing click incident rates stubbornly persist with no sign of them fading away any time soon. So, what are we missing? According to Verizon’s Data Breach Investigations Report, the human element is involved in 62% of breaches.
DHCP Fingerprinting in Windows: Applying Smarter DHCP Policies for Device Profiling with DDI Central
|
By [email protected]
Enterprise networks host a variety of devices, from workstations and VoIP phones to printers and IoT devices. Each group may have different network configuration requirements, making it increasingly difficult to maintain consistent settings as the network grows. Microsoft DHCP policies help address this challenge by evaluating attributes in DHCP requests and applying configurations based on defined conditions.
|
By Mahanya V
Somewhere in your fleet sits a laptop with a pristine, 100% compliance score. Not because it’s running the latest patches, but because it hasn’t talked to the server in three weeks, and a device that never checks in can’t exactly fail an audit, right? IT teams now manage more endpoints outside the office than inside it.
|
By Raghav S
Imagine that your device data and ticket live in two separate rooms within the same building. Your device already has the performance metrics needed to explain the problem—yet, just to make sense of the ticket, your help desk tech still has to walk into the first room, find the data, and carry it back to the ticket room for analysis. This journey, repeated across every single ticket, is what’s quietly costing your IT team.
|
By Judin Joan Soundarya
CAPTCHAs are designed to distinguish humans from automated systems. A user types distorted letters or clicks a few crosswalks, and in doing so proves there is a human behind the keyboard rather than a script. The whole idea rests on one assumption: A human, unlike a bot, will pause and think for a moment before acting. ClickFix takes that assumption and turns it into the attack itself. The fake verification screen does not ask the user to prove they are human by thinking.
|
By Sisupang S
A suspicious login, an unexpected privilege change, and a surge in file downloads may reach your security team as separate alerts. Understanding whether they belong to the same attack requires context. For your IT and security operations teams, connecting these signals takes time. If you're a CIO or CTO, that delay can increase your exposure to operational disruption and data loss. AI threat detection helps you analyze security activity, identify suspicious patterns, and prioritize investigations.
|
By ManageEngine
Phase one of the CA/Browser Forum's reduced certificate validity mandate is already live. By March 2029, public CA certificate renewal frequencies will be up to eight times higher. The mandate effectively sets a minimum bar for certificate management. You need full visibility into every certificate in your environment, automatic renewal workflows that can handle a much higher frequency without manual effort, and deployment that gets the renewed certificate live at the target server along with the necessary post-deployment actions. ManageEngine Key Manager Plus covers all three of these facets.
|
By ManageEngine
It's time to talk about weak spots in our Cybersecurity Awareness Month video series. Every enterprise has a weak spot in its cybersecurity posture, and it's those spots that end up costing you big time.
|
By ManageEngine
Unguarded Moments | Ep 1 of 5 | Cybersecurity Awareness Month Your clients' will keep clicking Remind me later. One unpatched laptop is all it takes to open the door to an entire client's office. For MSPs, patching has to happen on its own.
|
By ManageEngine
At the opening bell, your stock drops fifteen percent due to a data breach that never actually happened. Fake screenshots, a fake CEO statement, no actual hack. Your security team looks into it, but finds nothing because there's nothing to find. And the damage is already done. Gartner is calling disinformation attacks like this a top threat, and most companies aren’t prepared to handle it. For more insightful videos, visit ManageEngine Insights.
|
By ManageEngine
Imagine this: A cracked installer disguised as a productivity tool. An oversized file quietly eating into storage. An EXE attachment that never should have made it past the browser. Without a download policy in place, there's nothing stopping this from happening on any device—for any client at any time.
|
By ManageEngine
Standing exceptions to your application control policy are exactly that—standing. Once you allow an app or lift a restriction, it usually stays open indefinitely, whether or not it's still needed. In this tutorial, we cover how to configure just-in-time (JIT) application access in MSP Central. Learn how to grant temporary, rule-based access to specific applications so users get what they need for a limited window, without leaving permanent access behind.
|
By ManageEngine
Although a user syncing corporate passwords to a personal cloud account isn't the same as a malicious attack, it is still a massive security risk. When everyday browser features like autofill, third-party cookies, and cloud syncing aren't actively managed, your clients' sensitive data is left vulnerable. In this tutorial, we cover how to set up data leakage prevention (DLP) configurations for your clients using MSP Central.
|
By ManageEngine
Yoginath Galurgi, manager of IT Infrastructure at Fleetguard Filters Pvt. Ltd., explains how different solutions work magically to make IT resources more available, secure, and compliant. Learn how Fleetguard Filters Pvt. Ltd. enhances security and keeps its infrastructure compliant using ManageEngine solutions.
|
By ManageEngine
Anand Lunia, system admin at Fleetguard Filters Pvt. Ltd., explains how ManageEngine products works together to make IT resources more responsive and compliant. Learn how Fleetguard Filters Pvt. Ltd. streamlines workflows and keeps its infrastructure secured using ManageEngine solutions.
|
By ManageEngine
Ransomware doesn't just steal your data, it holds it hostage. Here's how an attack moves from entry to extortion, step by step. Watch part 2 of 5 where we break down how cyberattacks actually happen.
|
By ManageEngine
What if your IT systems could go beyond detecting issues to resolving them autonomously? This white paper explains how Agentic AI enables IT operations to shift from reactive monitoring to intelligent, self-driven execution. Explore use cases, challenges, and how observability data powers AI-driven actions.
|
By ManageEngine
Enable AI empowered IT operations without the hassles. Learn everything you need to know about AIOps today.
|
By ManageEngine
Rogue device intrusion has become a nightmare for admins running modern IT infrastructures. While these infrastructures are already under constant attack from several malicious entities, other factors like BYOD policies, IoT, and shadow IT make it a challenge to know about every connected device. Even with vigilant security measures in place rogue devices can seep through the cracks.
|
By ManageEngine
An effective SIEM solution ingests logs from different network sources to give visibility into user and host activities. It uses capabilities such as threat intelligence and behavioral analysis to set correlation rules to spot malicious activities within a network. This e-book will help you obtain the maximum value from your SIEM deployment by guiding you through 10 of the most critical capabilities capabilities.
|
By ManageEngine
One of the best ways to defend against both internal and external attacks is to integrate anomaly detection, a.k.a. user and entity behavior analytics capabilities, into your security analytics solution. In this e-book, we break down the different types of security anomalies and explain what each one looks like. We also explain how to determine the risk score of every user and host in the network. Finally, we cover five ways in which you can harden your defenses with anomaly detection.
|
By ManageEngine
Just as remote work has grown at an unprecedented rate across the world, so too have the number of email scams. Email is now the most popular attack vectors among adversaries. We've prepared a guide to help you understand the anatomy of popular email-based scams, how they work, and what you can do to avoid them. Key insights from the e-book.
|
By ManageEngine
Following the outbreak of COVID-19, organizations around the world have rapidly adopted remote work policies, making email communication more important than ever for disparate teams to collaborate. This has made it convenient for threat actors to launch email-based cyberattacks. The FBI has issued a public service announcement in which it revealed that it is anticipating business email compromise (BEC) attacks related to the COVID-19 crisis to increase. Hence, it's imperative for businesses to strengthen email security to mitigate email-borne threats.
|
By ManageEngine
Remote work is here to stay, at least for the time being. IT admins now face the stiff challenge of extending IT support to employees and ensuring smooth workflows. They are now forced to minimize help desk dependency and processes in place that ensure complete security. This e-book helps IT admins do exactly that. ManageEngine's in house IAM expert writes about accessibility and security aspects of password infrastructures, and how you as an IT admin can minimize the risk of employee down-time due to password mismanagement.
|
By ManageEngine
The National Institute of Standards and Technology (NIST) is a physical sciences laboratory and is now part of the United States Department of Commerce. The NIST publishes standards across fields including engineering, information technology, neutron research, and more.
|
By ManageEngine
Over 80 percent of all federal agencies use Microsoft Office 365, Azure, and collaboration products such as SharePoint, Yammer, and Teams to serve their thousands of employees and contractors. Office 365 has many benefits including enhanced security, mobility, and reporting, but how can you be sure that you're staying compliant and protecting information for an Office of Inspector General (OIG) audit?
- November 2026 (6)
- October 2026 (18)
- September 2026 (14)
- August 2026 (12)
- July 2026 (16)
- June 2026 (12)
- May 2026 (11)
- April 2026 (6)
- March 2026 (11)
- February 2026 (7)
- January 2026 (5)
- December 2025 (5)
- November 2025 (10)
- October 2025 (15)
- September 2025 (5)
- August 2025 (6)
- July 2025 (8)
- June 2025 (2)
- May 2025 (6)
- April 2025 (4)
- March 2025 (6)
- February 2025 (12)
- January 2025 (9)
- December 2024 (12)
- November 2024 (12)
- October 2024 (13)
- September 2024 (15)
- August 2024 (11)
- July 2024 (8)
- June 2024 (10)
- May 2024 (12)
- April 2024 (10)
- March 2024 (16)
- February 2024 (7)
- January 2024 (15)
- December 2023 (6)
- November 2023 (5)
- October 2023 (9)
- September 2023 (10)
- August 2023 (8)
- July 2023 (8)
- June 2023 (8)
- May 2023 (16)
- April 2023 (12)
- March 2023 (9)
- February 2023 (10)
- January 2023 (10)
- December 2022 (9)
- November 2022 (16)
- October 2022 (11)
- September 2022 (4)
- August 2022 (11)
- July 2022 (15)
- June 2022 (9)
- May 2022 (5)
- April 2022 (7)
- March 2022 (12)
- February 2022 (8)
- January 2022 (7)
- December 2021 (10)
- November 2021 (9)
- October 2021 (16)
- September 2021 (10)
- August 2021 (9)
- July 2021 (5)
- June 2021 (8)
- May 2021 (4)
- April 2021 (3)
- March 2021 (12)
- February 2021 (6)
- January 2021 (4)
- December 2020 (12)
- November 2020 (7)
- October 2020 (8)
- September 2020 (8)
- August 2020 (6)
- July 2020 (12)
- June 2020 (8)
- May 2020 (13)
- April 2020 (16)
- March 2020 (9)
- February 2020 (6)
- January 2020 (5)
As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.
ManageEngine crafts comprehensive IT management software with a focus on making your job easier. Our 90+ products and free tools cover everything your IT needs, at prices you can afford.
We have complete and easy solutions for even your most difficult IT management problems, from keeping your business safe, to ensuring high availability, to making your users happy. We’re bringing IT together so you don’t have to.
From network and device management to security and service desk software, we're bringing IT together for an integrated, overarching approach to optimize your IT.